Group Policy Changes

Se Lai
Se Lai used Ask the Experts™
Password policies was changed to zero age, length and history automatically. I am not sure what was happened on DC.
May I know what could be the reason(updates) or any other thing.?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Paul MacDonaldDirector, Information Systems
Someone changed the policy explicitly, or maybe an authoritative restore was done to some point prior to the policy being put in place.
Se LaiSystem Administrator


I haven't seen anything... no there was no backup. Maybe someone did it.
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2018
Do you have audit configured as per CIS standard? If you do/did, you would be able to see events for GPO edits
Did you check gpo and make sure no other GPO is overwriting, EX check domain policy.
Tech Lead
If you have auditing enabled then you can track the Group Policy changes.

And, if you have a backup of then you can restore it - How to back up and restore Group Policy Objects using PowerShell cmdlet:

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial